Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
File: jghAgExmgMQfIehybzgLleaelEc.mft (raw, json)
Hash identifier: 2DAgmajiF8aBJ3ciKJFRrzi9S3QuMgpxbieeK0tZJoE=
Subject key identifier: B9:EC:6D:7B:4F:4C:A0:34:C5:37:5D:F2:EA:3A:A6:DB:C4:B5:13:17
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 019CA9B3CD9514AC7B353DE7443A5C6B1779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
Manifest number: 0D96
Signing time: Sun 01 Mar 2026 14:00:58 +0000
Manifest this update: Sun 01 Mar 2026 14:00:58 +0000
Manifest next update: Mon 02 Mar 2026 14:00:58 +0000
Files and hashes: 1: FcDP4t2fUN_dTrYyfxsE8QW3Eyg.roa (hash: sDQcJIThGsK9Nrdf2isebfLDyVxi7JAHTUMrXx4QKTw=)
2: cjfADLaDEFlQK8qrVJ5NipbhmYQ.roa (hash: IRslVjUODdyfex5FaSaSEKWcalRpU1+utYy+dcv1SD4=)
3: jghAgExmgMQfIehybzgLleaelEc.crl (hash: a9adfLgQEUM8N4S8qFC3yeN39yWV/J/HQL2K9RDqfbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:cd:95:14:ac:7b:35:3d:e7:44:3a:5c:6b:17:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Mar 1 14:00:58 2026 GMT
Not After : Mar 2 14:00:58 2026 GMT
Subject: CN=b9ec6d7b4f4ca034c5375df2ea3aa6dbc4b51317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:44:ac:30:d7:b5:00:89:e2:e7:86:37:82:
3e:18:e2:b0:4f:49:c9:e3:be:94:e9:36:e7:30:98:
10:1c:22:b5:25:58:3a:e8:92:aa:82:ef:e6:d6:1c:
cb:35:a4:fa:69:7f:6a:23:20:2d:0d:d4:25:52:5d:
63:92:dd:2a:fa:8b:a1:a7:bc:c4:a2:d5:a3:4c:9d:
c4:78:89:da:1d:7a:75:23:88:5d:67:ce:de:5d:7c:
40:05:01:3a:81:38:17:7c:bb:7f:1b:bb:4f:39:e2:
34:7f:15:8f:d3:59:cc:b9:62:63:66:78:fe:3e:05:
0f:b9:9a:45:51:44:34:6f:8d:3b:33:d7:cc:0b:61:
bb:94:23:8b:a4:a7:e0:b0:da:0f:5f:43:e6:43:78:
6c:07:06:14:00:ef:1d:f7:7d:78:09:f8:61:e3:45:
e9:8f:56:5c:f4:e2:f9:6d:56:26:0a:73:a0:1e:c7:
da:10:18:bd:96:99:0c:ec:5a:41:5b:3c:f8:f1:a6:
fd:76:78:ea:03:da:3f:59:18:03:e5:52:91:8b:5a:
8f:ee:8b:16:59:12:52:1e:93:f8:37:1b:55:6d:5a:
d2:aa:75:84:08:be:08:d9:8f:36:fd:a7:97:59:af:
38:cf:db:e6:69:6c:7c:cd:cf:d9:a6:82:0b:80:41:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:6D:7B:4F:4C:A0:34:C5:37:5D:F2:EA:3A:A6:DB:C4:B5:13:17
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b6:cf:6d:1d:e2:16:af:f0:f8:8f:23:25:e6:43:56:e4:ca:
e6:9e:04:63:62:7c:a3:88:0d:82:fc:48:db:42:5a:64:0f:00:
ca:53:57:02:82:3f:ff:d6:e2:04:46:47:87:07:63:6d:50:75:
e5:c8:75:9a:7b:20:33:eb:4d:da:20:af:63:10:ce:9e:72:93:
95:0c:f0:f6:d5:32:4e:35:ec:5f:5b:08:43:c8:7d:29:2d:65:
da:b6:63:b0:7f:18:dd:0a:4b:da:96:01:69:9b:0b:f4:82:fb:
46:2a:b0:76:bb:1a:b3:a7:0b:d4:6d:90:e6:9d:86:77:b8:4e:
fa:22:98:e5:a7:de:11:ec:03:dc:04:a6:26:72:e8:89:86:c7:
74:de:b1:ae:f9:57:1a:5c:b6:6d:77:aa:20:a1:73:8b:90:ef:
65:34:38:dc:c6:74:6a:3d:54:20:90:0f:90:89:76:dd:df:0f:
94:9f:12:82:f0:5a:d2:c4:96:8e:9e:d3:25:e9:20:94:4e:ca:
60:9c:80:44:88:3f:d2:2b:4f:35:c1:db:70:25:2f:0c:49:29:
1c:5b:c6:20:c3:bc:e9:bc:08:63:7d:02:59:e7:03:b5:8a:3e:
15:f0:8b:29:29:99:20:c0:c8:0c:01:67:0d:4f:e8:d6:fb:ad:
87:a2:76:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps82VFKx7NT3nRDpcaxd5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDg0MDgwNGM2NjgwYzQxZjIxZTg3MjZmMzgwYjk1ZTY5
ZTk0NDcwHhcNMjYwMzAxMTQwMDU4WhcNMjYwMzAyMTQwMDU4WjAzMTEwLwYDVQQD
EyhiOWVjNmQ3YjRmNGNhMDM0YzUzNzVkZjJlYTNhYTZkYmM0YjUxMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ9ErDDXtQCJ4ueGN4I+GOKwT0nJ
476U6TbnMJgQHCK1JVg66JKqgu/m1hzLNaT6aX9qIyAtDdQlUl1jkt0q+ouhp7zE
otWjTJ3EeInaHXp1I4hdZ87eXXxABQE6gTgXfLt/G7tPOeI0fxWP01nMuWJjZnj+
PgUPuZpFUUQ0b407M9fMC2G7lCOLpKfgsNoPX0PmQ3hsBwYUAO8d9314Cfhh40Xp
j1Zc9OL5bVYmCnOgHsfaEBi9lpkM7FpBWzz48ab9dnjqA9o/WRgD5VKRi1qP7osW
WRJSHpP4NxtVbVrSqnWECL4I2Y82/aeXWa84z9vmaWx8zc/ZpoILgEFYTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnsbXtPTKA0xTdd8uo6ptvEtRMXMB8GA1UdIwQY
MBaAFI4IQIBMZoDEHyHocm84C5XmnpRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYt
YzI3OTk3NTNjODUzLzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZWU1NzItMzQyMC00NWU0LTg3YjYtYzI3OTk3NTNjODUz
LzEvamdoQWdFeG1nTVFmSWVoeWJ6Z0xsZWFlbEVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLbPbR3i
Fq/w+I8jJeZDVuTK5p4EY2J8o4gNgvxI20JaZA8AylNXAoI//9biBEZHhwdjbVB1
5ch1mnsgM+tN2iCvYxDOnnKTlQzw9tUyTjXsX1sIQ8h9KS1l2rZjsH8Y3QpL2pYB
aZsL9IL7Riqwdrsas6cL1G2Q5p2Gd7hO+iKY5afeEewD3ASmJnLoiYbHdN6xrvlX
Gly2bXeqIKFzi5DvZTQ43MZ0aj1UIJAPkIl23d8PlJ8SgvBa0sSWjp7TJekglE7K
YJyARIg/0itPNcHbcCUvDEkpHFvGIMO86bwIY30CWecDtYo+FfCLKSmZIMDIDAFn
DU/o1vuth6J2bQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:18 2026 by rpki-client